Suite Ansible

Sio2/SISR/40-ansible/rsyslogcli.yml

@@ -0,0 +1,45 @@
+---
+- hosts: web
+  tasks:
+  - name: decommente forwardtosyslog dans journald.conf
+    replace:
+      path: /etc/systemd/journald.conf
+      regexp: '^#ForwardToSyslog=yes'
+      replace: 'ForwardToSyslog=yes'
+      backup: true
+    notify: Restart journald
+
+  - name: modifier RateLimitInterval dans journald.conf
+    replace:
+      path: /etc/systemd/journald.conf
+      regexp: '^#RateLimitIntervalSec=30s'
+      replace: 'RateLimitIntervalSec=0'
+      backup: true
+    notify: Restart journald
+
+  - name: modifier RateLimitBurst dans journald.conf
+    replace:
+      path: /etc/systemd/journald.conf
+      regexp: '^#RateLimitBurst=10000'
+      replace: 'RateLimitBurst=0'
+      backup: true
+    notify: Restart journald
+
+  - name: deplacer log vers un serveur distant
+    lineinfile:
+      path: /etc/rsyslog.conf
+      line: '*.* @192.168.0.24:514'
+      backup: true
+    notify: Restart rsyslog
+
+  handlers:
+  - name: Restart journald
+    service:
+      name: systemd-journald.service
+      state: restarted
+
+  - name: Restart rsyslog
+    service:
+      name: rsyslog
+      state: restarted
+

Sio2/SISR/40-ansible/squid.yml

@@ -0,0 +1,30 @@
+---
+- hosts: adm
+  vars:
+  - proxy_port: 8080
+  - proxy_mem: 128
+  - localnet: "192.168.0.0/24"
+  tasks:
+  - name: installation squid
+    apt:
+      name: squid
+      state: present
+
+  - name: generation fichier de conf à partir de la template
+    template:
+      src: squid.conf.j2
+      dest: /etc/squid/squid.conf
+      mode: 0644
+      backup: true
+    notify: restart squid
+
+  handlers:
+  - name: restart squid
+    service:
+      name: squid
+      state: restarted
+
+#  - name: recuperer fichier de conf squid
+#    fetch:
+#      src: /etc/squid/squid.conf
+#      dest: ./squid.conf